Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa
File:                     7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa (raw, json)
Hash identifier:          v0yKelDMooahbAmwpEBC/pkxy2oocV1NA7E3r1jy7J4=
Subject key identifier:   9F:A6:D7:87:F5:3A:58:EE:40:53:2E:1B:90:23:7A:E7:25:44:CE:E1
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584A86DB7785BB7F23A6C46CB650
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     8075
IP address blocks:        2603:1062:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:77:85:bb:7f:23:a6:c4:6c:b6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=2ef9ab57-2df5-4c68-bb01-f7464cb52d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a5:e6:d5:d9:ec:87:43:d0:8f:1a:a2:5c:d8:
                    ab:d7:ce:c9:60:eb:1e:22:d3:79:1f:2b:3b:9a:cf:
                    e4:06:0c:56:f5:fd:85:64:59:0d:25:c6:da:ae:44:
                    e7:d2:fd:3d:92:96:9a:8d:65:43:e8:72:78:a9:ad:
                    65:63:45:d9:31:2e:29:71:c8:1d:48:d2:5d:ee:4b:
                    e9:ff:61:17:ec:47:b9:e4:27:3d:8d:5d:20:d7:40:
                    8f:ea:6b:ac:74:77:d9:f8:ce:42:b7:ba:af:dd:57:
                    84:4e:d5:0a:e2:0d:c7:0e:40:2e:c4:8b:d8:08:a5:
                    5c:fc:e8:58:9c:db:0e:85:63:9e:e9:a2:f5:0f:59:
                    d3:2d:9a:88:a8:a0:1a:40:00:15:1c:f7:02:36:ea:
                    b7:f4:73:d9:51:cb:5c:6a:ce:06:9f:b5:66:f7:90:
                    c5:be:d5:c4:12:3f:dc:51:2e:23:2b:bc:32:af:dd:
                    e9:89:81:f9:0d:22:f7:52:1b:f8:ea:87:72:39:54:
                    cf:ba:88:ec:aa:a2:cd:5d:6f:dd:f9:6a:26:04:fd:
                    b8:86:e6:93:ac:2e:e0:25:a4:65:76:cd:1c:6e:33:
                    90:5e:29:79:9f:82:ac:22:ca:f6:fa:18:1e:3a:b4:
                    07:79:6a:bd:0b:f2:47:c4:ae:1e:31:2f:56:03:3c:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A6:D7:87:F5:3A:58:EE:40:53:2E:1B:90:23:7A:E7:25:44:CE:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d6cf22f-161f-3bc2-88f7-f1058fe30e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:1062:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:60:8f:4f:84:74:7d:18:29:9c:b8:d1:48:4a:76:87:25:73:
         06:4c:d3:a0:e5:12:19:a7:ba:6c:a8:33:88:0a:fb:d4:70:b5:
         9c:3c:eb:f9:60:4a:d7:d5:db:04:58:f4:33:e4:3e:43:a2:a0:
         0a:95:38:fd:36:a2:22:39:f8:60:c7:43:52:68:24:4f:61:65:
         91:f4:4b:ed:be:88:19:ee:c7:81:9f:f0:c0:25:32:2e:f9:90:
         8a:fa:c0:c7:f2:96:67:0e:83:f2:86:8b:5e:87:6a:bf:5c:96:
         bf:ff:1f:d9:90:9f:1d:05:22:9f:74:1a:19:cd:7a:4c:c9:df:
         f0:33:76:56:b9:a4:b0:cc:6a:93:dd:6e:1e:97:ef:d9:35:77:
         89:0b:c8:1c:e7:db:12:db:c0:5a:a2:60:cc:8f:c2:d5:aa:7c:
         da:c1:94:b9:01:3a:81:cb:70:47:cc:66:a0:e9:d9:14:43:bf:
         04:f7:f5:e3:d1:32:d0:e7:52:1a:44:e4:c5:8d:4a:a8:79:f5:
         28:30:c5:63:cd:d5:51:41:5e:71:77:a1:f9:cb:15:8b:d4:96:
         70:ec:7a:eb:4c:85:a0:a0:e1:7e:f9:2f:87:a4:9b:b6:46:b8:
         2e:1a:99:dc:0d:dc:0e:66:4d:b9:66:72:64:aa:05:24:88:b6:
         4f:f5:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:42 2025 by rpki-client